Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
File:                     Uev2DyIajjHTawfqptLlP20GS20.mft (raw, json)
Hash identifier:          vR6u18ALVBAjvzFoXU4rhf6zzUA/POhDl6/EhGKZ2bs=
Subject key identifier:   3D:EE:CA:26:C1:22:5A:B3:62:05:AB:2E:86:78:BD:E1:CC:26:88:0E
Authority key identifier: 51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D
Certificate issuer:       /CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
Certificate serial:       01984A0A6639DE36255363CC99E7FA196039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
Manifest number:          CB
Signing time:             Sun 27 Jul 2025 04:00:52 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:52 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:52 +0000
Files and hashes:         1: 6cL0Kq2jENP4RbTfqSWNtMD0gog.roa (hash: B9YDbFIbrVtsJdUb+90YG+5LOIPbPTqvU71w0BJqJSg=)
                          2: Uev2DyIajjHTawfqptLlP20GS20.crl (hash: D5SgbwPJk0sduJNo0mcuRd7rw6M3pHrdwZcJcBjkN8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:66:39:de:36:25:53:63:cc:99:e7:fa:19:60:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
        Validity
            Not Before: Jul 27 04:00:52 2025 GMT
            Not After : Jul 28 04:00:52 2025 GMT
        Subject: CN=3deeca26c1225ab36205ab2e8678bde1cc26880e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:62:58:a3:3d:fe:82:43:6a:bf:16:ef:fc:
                    63:f0:50:d7:a5:f3:15:7a:c0:87:94:2d:af:29:6d:
                    24:c1:15:a7:94:d8:07:f8:dd:5c:3d:19:ef:a2:1d:
                    8c:76:d5:8e:4b:de:2d:49:a5:ce:4d:17:4d:ba:92:
                    c4:15:56:21:59:99:69:2a:75:6d:23:f8:dd:02:98:
                    2b:59:e2:6c:2f:28:02:02:98:4b:9e:18:64:f7:b0:
                    94:17:d5:d5:12:04:bc:04:78:e4:fd:61:ca:f5:45:
                    4d:cd:4a:58:c1:4c:6b:62:e1:07:ae:7b:05:73:46:
                    49:e3:12:3c:8a:0d:b6:ab:68:bc:ad:db:a0:03:2a:
                    3d:86:3a:04:1d:23:17:92:4f:0f:a0:d6:e3:89:46:
                    66:a7:5b:f0:37:8b:a9:13:87:74:7a:5a:2c:17:cc:
                    1b:0c:80:b9:e8:c5:e0:8c:b7:26:3d:56:a4:70:c1:
                    b3:57:46:9c:d7:54:9b:dc:71:43:9f:71:0e:41:81:
                    7c:18:a0:b6:fd:91:d4:af:07:1f:cd:3c:55:c5:ff:
                    cf:9f:b4:3c:ba:3e:49:23:fd:66:20:a3:4a:4c:1e:
                    83:48:b5:35:76:1a:ea:09:f6:2c:5d:c9:1c:65:25:
                    9e:5a:a9:07:ab:cb:9c:e0:96:cc:24:31:a0:f5:0e:
                    77:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EE:CA:26:C1:22:5A:B3:62:05:AB:2E:86:78:BD:E1:CC:26:88:0E
            X509v3 Authority Key Identifier:
                keyid:51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:25:56:ff:44:f2:85:1d:1a:2e:eb:0e:b6:51:4e:0c:67:48:
         45:8b:a4:01:ad:3e:61:ca:77:56:2f:35:a2:3f:c7:9f:d7:2b:
         3b:fb:3e:41:2d:d5:75:e9:37:9c:36:a9:4a:70:4c:80:52:5c:
         60:58:54:f8:bd:66:b1:74:8e:d7:41:03:ed:77:39:1e:8e:b2:
         0a:cf:0e:de:7f:9b:aa:52:3c:3b:cc:17:42:c6:88:d6:f6:ef:
         78:1f:4c:db:26:78:1b:d7:0f:bc:be:6b:ed:3b:de:89:31:31:
         3c:9b:7c:9f:22:a8:08:01:55:ef:b3:0f:91:87:d6:22:e0:e9:
         a5:93:1c:a0:1f:5f:b0:00:51:e5:08:a4:32:55:39:01:a2:f4:
         dc:86:d8:93:29:0e:c3:c5:48:8d:92:4b:b6:86:a1:6e:b4:26:
         ef:37:2d:ad:fd:4d:8c:b5:44:7a:2f:2a:49:1d:1f:9e:1d:88:
         44:28:db:53:5a:01:c0:0f:a7:d8:11:ab:ff:65:96:02:ca:c1:
         d6:a7:1a:92:81:4a:ea:01:0a:29:eb:0e:59:2c:a4:0a:93:8b:
         7f:67:b3:b8:0f:b0:3d:94:4a:59:5e:cb:a1:1d:29:94:76:6b:
         dc:4d:3e:47:2f:fb:15:5f:87:e3:a9:d1:96:3d:0c:0b:75:14:
         69:7c:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:02 2025 by rpki-client